$ rpki-client -vvf rpki-rsync.idnic.net/repo/IDNIC/1/95C0FEDF4348635C616CCD76866299FFF41521C1.cer File: 95C0FEDF4348635C616CCD76866299FFF41521C1.cer (raw, json) Hash identifier: pBg/P6VkSnJyfNCnzV1sZdos5//LGN/e5s13t4Elxa0= Subject key identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 Authority key identifier: 41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E Certificate issuer: /CN=A91862140000/serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Certificate serial: 6EBFE2E345C83CCE5AB66FD15D1AAEF444B6950E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Manifest: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft caRepository: rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/ Notify URL: https://rpki-rrdp.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 May 2026 02:39:10 +0000 Certificate not after: Sun 02 May 2027 02:44:10 +0000 Subordinate resources: IP: 103.145.52.0/23 IP: 2001:df1:fc80::/48 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:bf:e2:e3:45:c8:3c:ce:5a:b6:6f:d1:5d:1a:ae:f4:44:b6:95:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=419A85CDF8A430516946869D1C492037D6BC6E9E Validity Not Before: May 3 02:39:10 2026 GMT Not After : May 2 02:44:10 2027 GMT Subject: CN=95C0FEDF4348635C616CCD76866299FFF41521C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:80:35:f1:ac:95:d1:07:19:02:d3:09:21:22: 82:05:f0:0d:c5:2c:1d:c9:69:e4:9d:a7:19:27:d7: 0e:aa:05:a1:96:73:c6:f0:1b:69:03:6e:ba:71:34: 35:45:2f:85:0b:1c:78:98:ae:65:39:15:8c:0d:c4: 28:0c:c6:68:b9:f8:e4:7c:2c:93:19:7e:0c:5e:ec: 68:98:e3:8d:fa:4d:da:bd:f9:37:b7:16:30:08:84: 21:24:e3:fd:40:88:5c:98:6e:75:8a:2e:bd:92:2c: 46:55:18:f4:24:e8:41:f8:a2:76:5d:77:4d:bc:3b: 8f:66:33:84:43:db:31:03:2d:df:91:d3:bf:c3:e5: f6:d6:5e:95:2f:44:c5:ff:81:c4:60:48:f7:ff:87: c3:5e:67:8c:bc:06:40:5d:c7:5d:13:1d:52:b7:a4: a5:7b:a4:88:4a:17:91:31:5b:b6:96:39:c5:a6:24: 2f:82:39:f9:bb:a9:5f:e9:e5:d3:62:00:f2:8f:c4: bf:af:25:38:8c:e5:ec:67:5b:8a:9c:6d:10:2a:f9: ed:29:56:e9:02:b7:74:10:68:95:d1:13:26:cb:63: 3b:4a:1a:06:34:5b:b1:7b:27:ab:87:e9:9b:02:42: 35:c0:59:99:12:62:81:70:0d:af:80:69:57:52:61: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:C0:FE:DF:43:48:63:5C:61:6C:CD:76:86:62:99:FF:F4:15:21:C1 X509v3 Authority Key Identifier: keyid:41:9A:85:CD:F8:A4:30:51:69:46:86:9D:1C:49:20:37:D6:BC:6E:9E X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/ RPKI Manifest - URI:rsync://rpki-rsync.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/95C0FEDF4348635C616CCD76866299FFF41521C1.mft RPKI Notify - URI:https://rpki-rrdp.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.52.0/23 IPv6: 2001:df1:fc80::/48 Signature Algorithm: sha256WithRSAEncryption 88:77:f0:1e:a3:d6:ef:54:66:9d:3d:de:27:17:13:57:90:97: 42:10:ee:35:cc:f4:fc:f0:6d:b6:6b:e2:1b:db:e5:fc:69:55: 4f:4a:74:20:61:cf:96:e3:a4:25:b8:c5:b0:92:b3:38:52:94: ee:3b:22:f9:5f:fe:9b:7b:41:64:b4:11:9e:fc:8d:09:79:48: f0:21:82:a6:87:72:04:b3:c8:be:5f:53:24:70:23:72:5e:44: 5d:9b:71:ac:e4:19:56:da:fd:51:f6:45:3e:55:86:1c:d0:87: 91:4f:5c:51:c3:dc:68:c4:81:c5:8e:0e:96:68:53:e8:4e:9b: e1:b2:53:e2:76:fc:fd:a3:3c:42:bf:16:11:6e:0a:97:1b:94: 0d:fe:4c:be:52:60:16:e5:4f:93:9b:bc:42:08:0f:af:2f:d7: 10:a5:8b:d5:5e:0e:54:b4:cf:bc:bd:f7:4a:90:84:2d:99:95: 1a:1f:0f:8f:81:ee:7b:b7:d3:11:a1:3f:c1:0e:d5:4a:70:44: 69:50:f6:0c:03:f1:f9:79:3c:78:06:dc:9d:43:67:cb:90:26: a8:89:c1:a1:6f:dd:48:10:e7:91:12:17:c3:76:c7:db:47:59: c3:42:28:a3:80:fd:79:dc:23:ab:cd:24:7c:5d:97:55:d9:d5: 99:29:8f:04 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUbr/i40XIPM5atm/RXRqu9ES2lQ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg0MTlBODVDREY4 QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFMB4XDTI2MDUwMzAyMzkxMFoX DTI3MDUwMjAyNDQxMFowMzExMC8GA1UEAxMoOTVDMEZFREY0MzQ4NjM1QzYxNkND RDc2ODY2Mjk5RkZGNDE1MjFDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCANfGsldEHGQLTCSEiggXwDcUsHclp5J2nGSfXDqoFoZZzxvAbaQNuunE0 NUUvhQsceJiuZTkVjA3EKAzGaLn45Hwskxl+DF7saJjjjfpN2r35N7cWMAiEISTj /UCIXJhudYouvZIsRlUY9CToQfiidl13Tbw7j2YzhEPbMQMt35HTv8Pl9tZelS9E xf+BxGBI9/+Hw15njLwGQF3HXRMdUrekpXukiEoXkTFbtpY5xaYkL4I5+bupX+nl 02IA8o/Ev68lOIzl7GdbipxtECr57SlW6QK3dBBoldETJstjO0oaBjRbsXsnq4fp mwJCNcBZmRJigXANr4BpV1Jh0UsCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJXA/t9DSGNcYWzNdoZimf/0FSHBMB8GA1UdIwQYMBaAFEGa hc34pDBRaUaGnRxJIDfWvG6eMA4GA1UdDwEB/wQEAwIBBjBnBgNVHR8EYDBeMFyg WqBYhlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vSUROSUMvMS80 MTlBODVDREY4QTQzMDUxNjk0Njg2OUQxQzQ5MjAzN0Q2QkM2RTlFLmNybDB+Bggr BgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQv cmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RWnFG emZpa01GRnBSb2FkSEVrZ045YThicDQuY2VyMIIBLAYIKwYBBQUHAQsEggEeMIIB GjBVBggrBgEFBQcwBYZJcnN5bmM6Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBv L2Y3N2ZmZTJhLTMxZTQtNDgwMC05N2Q0LTc4NzRjMTIzMTkxMS8wLzCBgQYIKwYB BQUHMAqGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby9mNzdmZmUy YS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85NUMwRkVERjQzNDg2MzVD NjE2Q0NENzY4NjYyOTlGRkY0MTUyMUMxLm1mdDA9BggrBgEFBQcwDYYxaHR0cHM6 Ly9ycGtpLXJyZHAuaWRuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAG AwQBZ5E0MA8EAgACMAkDBwAgAQ3x/IAwDQYJKoZIhvcNAQELBQADggEBAIh38B6j 1u9UZp093icXE1eQl0IQ7jXM9PzwbbZr4hvb5fxpVU9KdCBhz5bjpCW4xbCSszhS lO47Ivlf/pt7QWS0EZ78jQl5SPAhgqaHcgSzyL5fUyRwI3JeRF2bcazkGVba/VH2 RT5VhhzQh5FPXFHD3GjEgcWODpZoU+hOm+GyU+J2/P2jPEK/FhFuCpcblA3+TL5S YBblT5ObvEIID68v1xCli9VeDlS0z7y990qQhC2ZlRofD4+B7nu30xGhP8EO1Upw RGlQ9gwD8fl5PHgG3J1DZ8uQJqiJwaFv3UgQ55ESF8N2x9tHWcNCKKOA/XncI6vN JHxdl1XZ1ZkpjwQ= -----END CERTIFICATE-----Generated at Tue May 12 22:03:53 2026 by rpki-client